Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/C626DD4A038311EF9BCA4C0B017001B1.roa
File: C626DD4A038311EF9BCA4C0B017001B1.roa (raw, json)
Hash identifier: whp4/yC2Lx5vDL2gZm3yevLHlduatbH9MGiw+cHXNSU=
Subject key identifier: 76:4C:B8:DC:1F:0A:13:8F:99:4E:DD:3A:B1:AE:80:40:7C:D0:AA:06
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 8586
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/C626DD4A038311EF9BCA4C0B017001B1.roa
Signing time: Fri 26 Apr 2024 04:16:37 +0000
ROA not before: Fri 26 Apr 2024 04:16:34 +0000
ROA not after: Tue 03 Sep 2024 04:16:34 +0000
asID: 131685
IP address blocks: 156.234.15.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 08 May 2024 00:16:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 34182 (0x8586)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Apr 26 04:16:34 2024 GMT
Not After : Sep 3 04:16:34 2024 GMT
Subject: CN=662b2aa5-c79d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:51:2a:74:68:82:aa:e7:fe:02:cc:ec:4c:7b:
ed:78:bf:4d:c1:e6:b3:39:3c:0d:3c:10:74:50:88:
91:4e:a9:48:da:c0:d1:1e:49:9c:0f:2f:f9:ee:b6:
00:e4:b8:7b:fd:0b:45:ac:6b:bb:2b:79:02:aa:78:
2d:20:4a:3c:12:8b:9f:8a:9f:41:33:74:0b:9f:ba:
35:09:49:5e:e4:da:7d:51:ec:6c:b3:d6:28:ea:06:
b8:a5:68:90:42:88:3d:ba:47:6f:79:72:93:55:4a:
a6:3a:34:43:fc:38:6c:a0:e4:54:44:69:02:93:04:
f3:aa:ff:16:36:6c:80:ca:b9:db:36:a3:bd:c3:a3:
94:15:e9:f0:be:20:a8:c8:69:32:6b:40:15:0b:24:
0b:e8:b9:30:69:a4:12:be:67:4e:36:8b:69:3c:d9:
20:d7:b2:a9:96:3f:23:3b:5d:75:dc:2c:c4:e9:ec:
3c:d7:52:4c:a4:36:8d:99:10:b6:ad:59:fd:5d:d3:
3e:d0:cd:63:aa:64:d5:1c:b6:f1:67:10:7e:d7:a5:
8d:a0:5a:9e:22:ef:9f:ed:41:50:74:53:89:12:e7:
7d:76:9c:c1:da:ce:d4:6d:68:f3:12:85:37:cd:23:
78:0d:b1:bb:27:57:cb:58:e0:03:a1:47:3d:6a:e3:
6c:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:4C:B8:DC:1F:0A:13:8F:99:4E:DD:3A:B1:AE:80:40:7C:D0:AA:06
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/C626DD4A038311EF9BCA4C0B017001B1.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.234.15.0/24
Signature Algorithm: sha256WithRSAEncryption
25:e9:75:04:4b:5b:7b:11:e9:53:24:7d:a3:50:99:01:fb:c2:
4f:5f:c5:8b:42:7f:f0:ea:54:8b:ee:0d:a6:e6:87:42:a5:c4:
fd:5d:c8:fd:01:f6:3d:38:8f:56:b0:c9:22:d8:db:b0:aa:4c:
1c:a1:ab:8e:8c:bd:4f:d3:85:e6:dc:dc:10:36:4f:5d:9c:cc:
31:7d:31:a9:a8:61:2c:05:78:14:aa:61:f9:82:be:6f:40:6f:
17:d3:56:a8:1e:0a:c5:e2:a1:67:15:10:43:70:e1:18:e7:1c:
ba:e1:b1:9a:62:4a:c6:79:96:b4:e5:7b:d0:29:bc:19:0b:5b:
ed:e6:81:8b:1d:3d:ee:c5:95:96:8f:14:32:8b:a4:c2:79:cf:
a6:d7:1c:bf:49:9c:f4:81:c2:9c:c2:c5:01:d6:d1:7a:b4:f5:
3b:4b:e3:c3:a3:fe:82:6f:a2:de:97:0c:01:b2:1f:64:38:ea:
2b:62:c8:e0:f2:42:6f:f4:8e:fa:6d:6e:5c:02:e5:c2:18:81:
d1:cc:20:f3:7d:a3:40:2b:04:c0:71:86:a1:e8:18:93:1b:c9:
54:02:28:04:6b:af:ea:1b:fe:cd:92:28:c2:1e:9a:7e:db:7e:
2a:68:c7:53:14:06:ad:6e:2b:70:09:b3:aa:57:a3:ed:e9:e1:
07:32:70:0d
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDAIWGMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjQwNDI2MDQxNjM0WhcNMjQwOTAzMDQxNjM0WjAYMRYw
FAYDVQQDEw02NjJiMmFhNS1jNzlkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEApVEqdGiCquf+AszsTHvteL9NweazOTwNPBB0UIiRTqlI2sDRHkmcDy/5
7rYA5Lh7/QtFrGu7K3kCqngtIEo8Eoufip9BM3QLn7o1CUle5Np9Uexss9Yo6ga4
pWiQQog9ukdveXKTVUqmOjRD/DhsoORURGkCkwTzqv8WNmyAyrnbNqO9w6OUFenw
viCoyGkya0AVCyQL6LkwaaQSvmdONotpPNkg17Kplj8jO1113CzE6ew811JMpDaN
mRC2rVn9XdM+0M1jqmTVHLbxZxB+16WNoFqeIu+f7UFQdFOJEud9dpzB2s7UbWjz
EoU3zSN4DbG7J1fLWOADoUc9auNs0wIDAQABo4ICojCCAp4wHQYDVR0OBBYEFHZM
uNwfChOPmU7dOrGugEB80KoGMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC9DNjI2REQ0QTAzODMxMUVGOUJDQTRDMEIwMTcwMDFCMS5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnOoPMA0GCSqGSIb3DQEBCwUA
A4IBAQAl6XUES1t7EelTJH2jUJkB+8JPX8WLQn/w6lSL7g2m5odCpcT9Xcj9AfY9
OI9WsMki2NuwqkwcoauOjL1P04Xm3NwQNk9dnMwxfTGpqGEsBXgUqmH5gr5vQG8X
01aoHgrF4qFnFRBDcOEY5xy64bGaYkrGeZa05XvQKbwZC1vt5oGLHT3uxZWWjxQy
i6TCec+m1xy/SZz0gcKcwsUB1tF6tPU7S+PDo/6Cb6LelwwBsh9kOOorYsjg8kJv
9I76bW5cAuXCGIHRzCDzfaNAKwTAcYah6BiTG8lUAigEa6/qG/7NkijCHpp+234q
aMdTFAatbitwCbOqV6Pt6eEHMnAN
-----END CERTIFICATE-----
Generated at Mon May 6 09:08:16 2024 by rpki-client on console-fra.rpki-client.org